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Claims 

The following is a copy of Applicant's claims that identifies language being added with 
underlining (" ") and language being deleted with sttiketbrough (" — ")> as is applicable: 



1-6. (Canceled) 



I 

rf. (Currently amended) A method forproc ossing-breakpomt events in a child proc e ss 
created from a parent procooo, whoroin - tho - parcpt proc e ss is modifi e d by a software tool^ fee 
m e t h od comprising: 

instrumenting a parent process to aenerate instrumented functions in the parent process so 
as to create an instrumented version of the parent process: 

storing uninstrumented instructions associated with the instrumented functions of the 
parent process: 

broakpointrinsortod into th e oddreoo opaoo during - modi 6 cation of th e parent prooooo; 

monitoring with a process monitor execution of a child process created by the parent 
process for an initial breakpoint in the address space of the child process : 

suspending with the pr ocess monitor execution of the child process in response to 
detection of the initial breakpoint with the process monitor ; 

replacing with the pr ocess monitor each occurrence of a breakpoint in the address space 
of the child process with the unmodified uninstrumented parent process oodo instructions such 
t hat the child process reflects an original- uninstrumented state of the parent process : and 
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resuming execution of the child process such that an uninstrumented version of the child 
process is executed , 

z / 

ft* (Currently amended) The method of claim /, wherein storing comprises retaining 
a copy of the uninstrumented instructions roploccd by th e breakpoint in a process image store. 

3 < 

(Currently amended) The method of claim wherein monitoring comprises 
e x e cuting o the process monitor configured to r e spond responding to trace events generated by 
the child process. 



10-19. (Canceled) 

(New) The method of claim /> wherein replacing comprises backpatching each 
occurrence of a breakpoint encountered in the address space of the child process. 

(New) The method of claim ft further comprising, after the child process has 
terminated, the process monitor setting a process monitor thread to monitor execution of the 
parent process. 

(o 5* 

ft. (New) The method of claim further comprising the process monitor: 
monitoring the parent process for an indication that the parent process is about to resume 
execution; 
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suspending execution of the parent process in response to the indication that the parent 
process is about to resume; and 

restoring each breakpoint occurrence to the address space of the parent process. 

7 6 

jzf* (New) The method of claim 22C further comprising the process monitor 



in association with the replacing, generating and storing a list of breakpointed functions 
such that a record is maintained as to what instrumented functions were replaced in the child 
process, wherein the restoring is performed by the process monitor in reference to the list. 

v <■ 

^fi. (New) The method of claim )$ % further comprising the process monitor 
resuming execution of the parent process; and 
monitoring execution of the parent process. 

7 

(New) A computer-readable medium that stores a software tool, the software tool 

comprising: 

an instrumentation engine configured to instrument a parent process to generate an 
instrumented version of the parent process that contains instrumented functions, the 
instrumentation engine further configured to store uninstrumented instructions associated with 
the instrumented functions in a process image store; and 

a process monitor configured to monitor execution of the parent process and a child 
process created by the parent process, the process monitor further being configured to suspend 
execution of the child process upon an initial breakpoint being encountered, to replace each 
occurrence of a breakpoint in the address space of the child process with the uninstrumented 
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instructions from the process image store, and to resume execution of the child process such that 
an uninstrumented version of the child process will be executed. 

JO cj 

(New) The computer-readable medium of claim ^£ wherein the process monitor 

is further configured to monitor the parent process for an indication that the parent process is 

about to resume execution, to suspend execution of the parent process in response to the 

indication that the parent process is about to resume, and to restore each breakpoint occurrence to 

the address space of the parent process such that the instrumented version of the parent process 

will be executed. 

H JO 

(New) The computer-readable medium of claim^Twherein the process monitor 

is further configured to generate and store a list of breakpointed functions such that a record is 

maintained as to what instrumented functions were replaced in the child process, wherein the 

process monitor restores each breakpoint occurrence through reference to the list. 

A JO 

JZS* (New) The computer-readable medium of claim J2^ t wherein the process monitor 
is further configured to resume execution of the parent process and monitor execution of the 
parent process. 
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